Global Privacy Law and DPA Directory

Data protection laws exist across the globe. This tool has an interactive map identifying those countries with data protection laws. Within each country’s listing, if available, you can link to a resource containing the data protection law, the data protection authority, and relevant IAPP resources. The IAPP Resource Center also hosts a "Global Comprehensive Privacy Law Mapping Chart," which maps the differences between comprehensive privacy laws globally.

The Westin Research Center will periodically update these tools. As always, we appreciate input from our members. If you have comments about the information or believe additional material should be included, please share it with us at research@iapp.org.

Note: This tool is for informational purposes and is not legal advice. The status of a country's data protection legislation should always be verified via official sources.

  • Select Countries
    Resources
    Afghanistan
    Aland Islands
    Albania
    Algeria
    American Samoa
    Andorra
    Angola
    Anguilla
    Antigua And Barbuda
    Argentina
    Armenia
    Aruba
    Australia
    Austria
    Azerbaijan
    Bahamas
    Bahrain
    Bangladesh
    Barbados
    Belarus
    Belgium
    Belize
    Benin
    Bermuda
    Bhutan
    Bolivia
    Bonair Saint Eustachius And Saba
    Bosnia And Herzegovina
    Botswana
    Brazil
    British Virgin Islands
    Brunei
    Bulgaria
    Burkina Faso
    Burundi
    Cape Verde
    Cambodia
    Cameroon
    Canada
    Cayman Islands
    Central African Republic
    Chad
    Chile
    China
    Colombia
    Comoros
    Cook Islands
    Costa Rica
    Ivory Coast
    Croatia
    Cuba
    Curacao
    Cyprus
    Czech Republic
    North Korea
    Democratic Republic Of The Congo
    Denmark
    Diego Garcia
    Djibouti
    Dominica
    Dominican Republic
    Ecuador
    Egypt
    El Salvador
    Equatorial Guinea
    Eritrea
    Estonia
    Swaziland
    Ethiopia
    European
    Faroe Islands
    Fiji
    Finland
    France
    French Guiana
    French Polynesia
    French Southern And Antarctic Lands
    Gabon
    Gambia
    Georgia
    Germany
    Ghana
    Gibraltar
    Greece
    Greenland
    Grenada
    Guadeloupe
    Guam
    Guatemala
    Guernsey
    Guinea
    Guinea Bissau
    Guyana
    Haiti
    Heard Island And Mcdonald Islands
    Honduras
    Hong Kong
    Hungary
    Iceland
    India
    Indonesia
    Iran
    Iraq
    Ireland
    Isle Of Man
    Israel
    Italy
    Jamaica
    Japan
    Jersey
    Jordan
    Kazakhstan
    Kenya
    Kiribati
    Kosovo
    Kuwait
    Kyrgyzstan
    Lao Peoples Democratic Republic
    Latvia
    Lebanon
    Lesotho
    Liberia
    Libya
    Liechtenstein
    Lithuania
    Luxembourg
    Macau
    Madagascar
    Malawi
    Malaysia
    Maldives
    Mali
    Malta
    Marshall Islands
    Martinique
    Mauritania
    Mauritius
    Mayotte
    Mexico
    Micronesia
    Monaco
    Mongolia
    Montenegro
    Montserrat
    Morocco
    Mozambique
    Myanmar
    Namibia
    Nauru
    Nepal
    Netherlands
    New Caledonia
    New Zealand
    Nicaragua
    Niger
    Nigeria
    Niue
    Macedonia
    Northern Mariana Islands
    Norway
    Oman
    Pakistan
    Palau
    Palestinian Territories
    Panama
    Papua New Guinea
    Paraguay
    Peru
    Philippines
    Poland
    Portugal
    Puerto Rico
    Qatar
    South Korea
    Moldova
    Republic Of The Congo
    Reunion
    Romania
    Russia
    Rwanda
    Saint Barthelemy
    Saint Kitts And Nevis
    Saint Lucia
    Saint Martin
    Saint Pierre And Miquelon
    Saint Vincent And The Grenadines
    Samoa
    San Marino
    Sao Tome And Principe
    Saudi Arabia
    Senegal
    Republic Of Serbia
    Seychelles
    Sierra Leone
    Singapore
    Sint Maarten
    Slovakia
    Slovenia
    Solomon Islands
    Somalia
    South Africa
    South Georgia And South Sandwich Islands
    South Sudan
    Spain
    Sri Lanka
    Sudan
    Suriname
    Svalbard And Jan Mayen
    Sweden
    Switzerland
    Syria
    Taiwan
    Tajikistan
    Thailand
    Timor Leste
    Togo
    Tonga
    Trinidad And Tobago
    Tunisia
    Turkey
    Turkmenistan
    Turks And Caicos Islands
    Uganda
    Ukraine
    United Arab Emirates
    United Kingdom
    Tanzania
    United States
    Uruguay
    Us Virgin Islands
    Uzbekistan
    Vanuatu
    Venezuela
    Vietnam
    Wallis And Futuna
    Western Sahara
    Yemen
    Zambia
    Zimbabwe
  • 101 Global Privacy Resources

    Tool Last Updated: March 2024

    Regional Topic Pages

    Discover the IAPP's latest resources by region through the topic pages linked below:

    Africa, Asia, Australia/New Zealand, Brazil, Canada, China, Europe, India, Latin America, Middle East, Russia, United Kingdom, US Federal Privacy, US State Privacy

    Country Directory

    Within each listing, if available, there will be links to the DPA, privacy legislation and relevant resources.


  • Afghanistan

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Afghanistan.

    Additional Resources

  • Åland Islands

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Albania

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Algeria

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • American Samoa

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for American Samoa.
  • Andorra

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Angola

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Anguilla

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Anguilla.
  • Antigua and Barbuda

    Data Protection Authority

    Privacy Legislation

  • Argentina
  • Armenia

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Aruba

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Aruba.
  • Australia
  • Austria
  • Azerbaijan
  • Bahamas

    Data Protection Authority

    Privacy Legislation

    • Data Protection (Privacy of Personal Information) Act ("DPA") - Link unavailable
  • Bahrain
  • Bangladesh

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Barbados

    Data Protection Authority

    Privacy Legislation

  • Belarus
  • Belgium

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Belize

    Data Protection Authority

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Belize.

    Privacy Legislation

    Additional Resources

  • Benin
  • Bermuda

    Data Protection Authority

    Privacy Legislation

  • Bhutan

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Bolivia (Plurinational State of)

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Bolivia.

    Additional Resources

  • Bonaire, Sint Eustatius and Saba
  • Bosnia and Herzegovina
  • Botswana

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Brazil
  • British Virgin Islands

    Data Protection Authority

    • The IAPP is unaware of a data protection authority for British Virgin Islands.

    Privacy Legislation

  • Brunei Darussalam

    Data Protection Authority

    Privacy Legislation

    • The IAPP is unaware of comprehensive data protection legislation for Brunei Darussalam.

    Additional Resources

  • Bulgaria
  • Burkina Faso
  • Burundi

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Burundi.

    Additional Resources

  • Cabo Verde
  • Cambodia

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Cambodia.

    Additional Resources

  • Cameroon

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Cameroon.

    Additional Resources

  • Canada
  • Cayman Islands

    Data Protection Authority

    Privacy Legislation

  • Central African Republic

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for the Central African Republic.

    Additional Resources

  • Chad
  • Chile

    Data Protection Authority

    • The IAPP is unaware of a data protection authority for Chile.

    Privacy Legislation

    Additional Resources

  • China

    Data Protection Authority

    • No single authority (sectoral regulation.) The PIPL notes that the Cyberspace Administration of China (CAC) is responsible for planning and coordination of personal information protection and related supervision.

    Privacy Legislation

    Additional Resources

  • Colombia
  • Comoros

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Comoros.

    Additional Resources

  • Cook Islands

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for the Cook Islands.
  • Costa Rica
  • Côte d’Ivoire
  • Croatia

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Cuba

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Curaçao

    Data Protection Authority

    • The IAPP is unaware of a data protection authority for Curaçao.

    Privacy Legislation

    Additional Resources

  • Cyprus

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Czechia

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Democratic People's Republic of Korea

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for the Democratic People's Republic of Korea.

    Additional Resources

  • Democratic Republic of the Congo

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Democratic Republic of the Congo.

    Additional Resources

  • Denmark

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Diego Garcia

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Diego Garcia.
  • Djibouti

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Djibouti.

    Additional Resources

  • Dominica

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Dominica.

    Additional Resources

  • Dominican Republic

    Data Protection Authority

    • The IAPP is unaware of a data protection authority for the Dominican Republic.

    Privacy Legislation

    Additional Resources

  • Ecuador
  • Egypt

    Data Protection Authority

    • Data Protection Centre (DPC) - Law not yet operational

    Privacy Legislation

    Additional Resources

  • El Salvador

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for El Salvador.

    Additional Resources

  • Equatorial Guinea

    Data Protection Authority

    • Governing Body for the Protection of Personal Data (Law not yet operational)

    Privacy Legislation

    • Law No. 1/2016 on the Protection of Personal Data (Law not yet operational)

    Additional Resources

  • Eritrea

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Eritrea.

    Additional Resources

  • Estonia

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Eswatini (Swaziland)

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Ethiopia

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Ethiopia.

    Additional Resources

  • European Union

    Data Protection Authority and Privacy Legislation

    Additional Resources

  • Faroe Islands

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Fiji

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Fiji.

    Additional Resources

  • Finland

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • France
  • French Guiana

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for French Guiana.
  • French Polynesia

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for French Polynesia.
  • French Southern Territories

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for the French Southern Territories.
  • Gabon
  • Gambia (Republic of The)

    Data Protection Authority

    Privacy Legislation

    • The IAPP is unaware of comprehensive data protection legislation for Gambia (Republic of The).

    Additional Resources

  • Georgia
  • Germany

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Ghana

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Gibraltar

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Greece

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Greenland

    Data Protection Authority

    Privacy Legislation

  • Grenada

    Data Protection Authority

    • Information Commission (not yet established)

    Privacy Legislation

    Additional Resources

  • Guadeloupe

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Guadeloupe.

    Additional Resources

  • Guam

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Guam.
  • Guatemala

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Guatemala.

    Additional Resources

  • Guernsey
  • Guinea

    Data Protection Authority

    • The IAPP is unaware of a data protection authority for Guinea.

    Privacy Legislation

    Additional Resources

  • Guinea-Bissau

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Guinea-Bissau.

    Additional Resources

  • Guyana

    Data Protection Authority

    • The IAPP is unaware of a data protection authority for Guyana.

    Privacy Legislation

  • Haiti

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Haiti.

    Additional Resources

  • Heard Island and McDonald Islands

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for the Heard Island and McDonald Islands.
  • Honduras

    Data Protection Authority

    • The IAPP is unaware of a data protection authority for Honduras.

    Privacy Legislation

    Additional Resources

  • Hong Kong
  • Hungary

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Iceland
  • India

    Data Protection Authority

    • Data Protection Board of India (yet to be established.)

    Privacy Legislation

    Additional Resources

  • Indonesia

    Data Protection Authority

    • The IAPP is unaware of a data protection authority for Indonesia.

    Privacy Legislation

    Additional Resources

  • Iran (Islamic Republic of)

    Data Protection Authority

    Privacy Legislation

    • The IAPP is unaware of comprehensive data protection legislation for Iran (Islamic Republic of).

    Additional Resources

  • Iraq

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Iraq.

    Additional Resources

  • Ireland

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Isle of Man

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Israel
  • Italy

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Jamaica

    Data Protection Authority

    Privacy Legislation

  • Japan
  • Jersey
  • Jordan
  • Kazakhstan
  • Kenya

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Kiribati

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Kiribati.
  • Kosovo
  • Kuwait
  • Kyrgyzstan
  • Lao People’s Democratic Republic
  • Latvia

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Lebanon

    Data Protection Authority

    • The IAPP is unaware of a data protection authority for Lebanon.

    Privacy Legislation

    Additional Resources

  • Lesotho

    Data Protection Authority

    • The Data Protection Commission (yet to be established.)

    Privacy Legislation

    Additional Resources

  • Liberia

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Liberia.

    Additional Resources

  • Libya

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Libya.

    Additional Resources

  • Liechtenstein

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Lithuania

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Luxembourg

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Macau
  • Madagascar

    Data Protection Authority

    • The Madagascan Information Commission (yet to be established.)

    Privacy Legislation

    Additional Resources

  • Malawi

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Malaysia

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Maldives

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Maldives.
  • Mali
  • Malta
  • Marshall Islands

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for the Marshall Islands.
  • Martinique

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Martinique.
  • Mauritania

    Data Protection Authority

    • Personal Data Protection Authority (yet to be established.)

    Privacy Legislation

    Additional Resources

  • Mauritius

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Mayotte

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Mayotte.

    Additional Resources

  • Mexico
  • Micronesia (Federated States of)

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Micronesia (Federated States of).
  • Monaco
  • Mongolia
  • Montenegro
  • Montserrat

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Montserrat.
  • Morocco

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Mozambique

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of comprehensive data protection legislation for Mozambique.

    Additional Resources

  • Myanmar

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of comprehensive data protection legislation for Myanmar.

    Additional Resources

  • Namibia

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of comprehensive data protection legislation for Namibia.

    Additional Resources

  • Nauru

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of comprehensive data protection legislation for Nauru.
  • Nepal

    Data Protection Authority

    • The IAPP is unaware of a data protection authority for Nepal.

    Privacy Legislation

    Additional Resources

  • Netherlands (Kingdom of the)

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • New Caledonia

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for New Caledonia.
  • New Zealand

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Nicaragua

    Data Protection Authority

    • Nicaraguan data protection authority (DIPRODAP) (yet to be established.)

    Privacy Legislation

    Additional Resources

  • Niger
  • Nigeria
  • Niue

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Niue.
  • North Macedonia

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Northern Mariana Islands

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Northern Mariana Islands.
  • Norway

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Oman
  • Pakistan

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Pakistan.

    Additional Resources

  • Palau

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Palau.
  • Palestinian Territories

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for the Palestinian Territories.

    Additional Resources

  • Panama
  • Papua New Guinea

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Papua New Guinea.

    Additional Resources

  • Paraguay

    Data Protection Authority

    • The IAPP is unaware of a data protection authority for Paraguay.

    Privacy Legislation

    Additional Resources

  • Peru
  • Philippines

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Poland

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Portugal

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Puerto Rico

    Data Protection Authority

    Privacy Legislation

    • The IAPP is unaware of comprehensive data protection legislation for Puerto Rico.
  • Qatar
  • Republic of Korea
  • Republic of Moldova
  • Republic of the Congo

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for the Republic of the Congo.

    Additional Resources

  • Réunion

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Réunion.
  • Romania
  • Russian Federation
  • Rwanda

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Saint Barthélemy

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Saint Barthélemy.
  • Saint Kitts and Nevis

    Data Protection Authority

    • Information Commissioner (yet to be established.)

    Privacy Legislation

  • Saint Lucia

    Data Protection Authority

    • Data Protection Commissioner (link unavailable.)

    Privacy Legislation

  • Saint Martin

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Saint Martin.
  • Saint Pierre and Miquelon

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Saint Pierre and Miquelon.
  • Saint Vincent and the Grenadines

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Saint Vincent and the Grenadines.
  • Samoa

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Samoa.
  • San Marino
  • São Tomé and Príncipe
  • Saudi Arabia
  • Senegal

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Serbia
  • Seychelles

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Sierra Leone

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Sierra Leone.

    Additional Resources

  • Singapore
  • Sint Maarten

    Data Protection Authority

    • Personal Data Protection Supervisory Committee (link unavailable.)

    Privacy Legislation

  • Slovakia
  • Slovenia

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Solomon Islands

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for the Solomon Islands.
  • Somalia

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • South Africa

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • South Georgia and the South Sandwich Islands

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for South Georgia and the South Sandwich Islands.
  • South Sudan

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for South Sudan.

    Additional Resources

  • Spain

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Sri Lanka

    Data Protection Authority

    • The Data Protection Authority of Sri Lanka (yet to be established.)

    Privacy Legislation

    Additional Resources

  • Sudan

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Sudan.

    Additional Resources

  • Suriname

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Suriname.

    Additional Resources

  • Svalbard and Jan Mayen

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Svalbard and Jan Mayen.
  • Sweden

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Switzerland
  • Syrian Arab Republic

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Syria.

    Additional Resources

  • Taiwan

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Tajikistan
  • Thailand

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Timor-Leste

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Timor-Leste.

    Additional Resources

  • Togo

    Data Protection Authority

    • Togolese Data Protection Authority (IPDCP)

    Privacy Legislation

    Additional Resources

  • Tonga

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Tonga.
  • Trinidad and Tobago

    Data Protection Authority

    • Office of the Information Commissioner (yet to be established.)

    Privacy Legislation

    Additional Resources

  • Tunisia
  • Türkiye
  • Turkmenistan
  • Turks and Caicos Islands

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Turks and Caicos Islands.
  • Uganda
  • Ukraine

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • United Arab Emirates

    Data Protection Authority

    • UAE Data Office (yet to be established.)

    Privacy Legislation

    Additional Resources

  • United Kingdom of Great Britain and Northern Ireland
  • United Republic of Tanzania

    Data Protection Authority

    • The Personal Data Protection Commission (PDPC) (link unavailable.)

    Privacy Legislation

    Additional Resources

  • United States of America

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Uruguay
  • US Virgin Islands

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for the US Virgin Islands.
  • Uzbekistan
  • Vanuatu

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Vanuatu.
  • Venezuela, Bolivarian Republic of

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Venezuela.

    Additional Resources

  • Viet Nam

    Data Protection Authority

    Privacy Legislation

    Additional Resources

  • Wallis and Futuna

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Wallis and Futuna.
  • Western Sahara

    Data Protection Authority and Privacy Legislation

    • The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Western Sahara.

    Additional Resources

  • Yemen

    Data Protection Authority

    • The IAPP is unaware of a data protection authority for Yemen.

    Privacy Legislation

    Additional Resources

  • Zambia

    Data Protection Authority

    • Office of the Data Protection Commissioner (yet to be established.)

    Privacy Legislation

    Additional Resources

  • Zimbabwe